OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-100266

HIGH · CVSS 7.7 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

JetBrains Hub versions prior to 2026.2.52366 have a vulnerability that allows authenticated users to send arbitrary emails using the server's trusted address due to missing authorization checks. This could lead to phishing attacks or unauthorized communication, potentially compromising user trust and data integrity. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-100266
Severity
HIGH
CVSS
7.7
EPSS
0.23%

Original NVD Description

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-103497 MEDIUM CVE-2026-103496 MEDIUM CVE-2026-103495 MEDIUM CVE-2026-103494 MEDIUM CVE-2026-103493 HIGH CVE-2026-103492 MEDIUM